Environment
Novell Open Enterprise Server 2 (OES 2) Linux Support Pack 3
Novell Cluster Services 1.8.4
Novell Cluster Services 1.8.4
Situation
While attempting to create a cluster-enabled pool in NSSMU, the following error is encountered...
"-99 Error cluster enabling the NSS pool"
The following is captured in /var/log/messages...
Jul 29 07:13:47 EDMB2 kernel: NSSLOG ==> [MSAP] comnLog.c[201]
Jul 29 07:13:47 EDMB2 kernel: Pool "EDMBC1" - MSAP block initialized.
Jul 29 07:13:47 EDMB2 kernel: NSSLOG ==> [MSAP] comnLog.c[201]
Jul 29 07:13:47 EDMB2 kernel: Pool "EDMBC1" - MSAP activate.
Jul 29 07:13:47 EDMB2 kernel: Server(77cec522-6d6d-102f-bf-ed-00505639a792) Cluster(00000000-0000-0000-00-00-000000000000)
Jul 29 07:13:47 EDMB2 kernel: NSSLOG ==> [MSAP] comnLog.c[201]
Jul 29 07:13:47 EDMB2 kernel: Pool "EDMBC1" - Watching pool.
Jul 29 07:13:48 EDMB2 kernel: NSSLOG ==> [Upgrade] zlssUpgrade.c[3224]
Jul 29 07:13:48 EDMB2 kernel: ZLSS upgrade thread started.
Jul 29 07:13:48 EDMB2 kernel: NSSLOG ==> [MSAP] comnLog.c[201]
Jul 29 07:13:48 EDMB2 kernel: Pool "EDMBC1" - MSAP deactivate.
Jul 29 07:13:48 EDMB2 kernel: There is no stop!
Jul 29 07:14:08 EDMB2 ncs-configd: LDAP bind failed: ldap.INVALID_CREDENTIALS
Jul 29 07:14:08 EDMB2 kernel: NSSLOG ==> [MSAP] comnLog.c[201]
Jul 29 07:14:08 EDMB2 kernel: Pool "EDMBC1" - MSAP activate.
Jul 29 07:14:08 EDMB2 kernel: Server(77cec522-6d6d-102f-bf-ed-00505639a792) Cluster(c18e388e-3307-40b8-7a-94-8e388ec10733)
Jul 29 07:14:08 EDMB2 kernel: NSSLOG ==> [MSAP] comnLog.c[201]
Jul 29 07:14:08 EDMB2 kernel: Pool "EDMBC1" - Watching pool.
Jul 29 07:14:09 EDMB2 kernel: NSSLOG ==> [MSAP] comnLog.c[201]
Jul 29 07:14:09 EDMB2 kernel: Pool "EDMBC1" - MSAP deactivate.
Jul 29 07:14:28 EDMB2 ncs-configd: LDAP bind failed: ldap.INVALID_CREDENTIALS
Jul 29 07:14:48 EDMB2 ncs-configd: LDAP bind failed: ldap.INVALID_CREDENTIALS
Jul 29 07:14:48 EDMB2 kernel: There is no stop!
Jul 29 07:15:07 EDMB2 ncs-configd: LDAP bind failed: ldap.INVALID_CREDENTIALS
Jul 29 07:15:25 EDMB2 ncs-configd: LDAP bind failed: ldap.INVALID_CREDENTIALS
Jul 29 07:15:25 EDMB2 kernel: CLUSTER-<INFO>-<12040>: Rebuild command issued to all the nodes.
Jul 29 07:15:51 EDMB2 kernel: NSSLOG ==> [Upgrade] zlssUpgrade.c[3409]
Jul 29 07:15:51 EDMB2 kernel: ZLSS upgrade thread done for now.
Jul 29 07:15:51 EDMB2 ncs-configd: LDAP bind failed: ldap.INVALID_CREDENTIALS
"-99 Error cluster enabling the NSS pool"
The following is captured in /var/log/messages...
Jul 29 07:13:47 EDMB2 kernel: NSSLOG ==> [MSAP] comnLog.c[201]
Jul 29 07:13:47 EDMB2 kernel: Pool "EDMBC1" - MSAP block initialized.
Jul 29 07:13:47 EDMB2 kernel: NSSLOG ==> [MSAP] comnLog.c[201]
Jul 29 07:13:47 EDMB2 kernel: Pool "EDMBC1" - MSAP activate.
Jul 29 07:13:47 EDMB2 kernel: Server(77cec522-6d6d-102f-bf-ed-00505639a792) Cluster(00000000-0000-0000-00-00-000000000000)
Jul 29 07:13:47 EDMB2 kernel: NSSLOG ==> [MSAP] comnLog.c[201]
Jul 29 07:13:47 EDMB2 kernel: Pool "EDMBC1" - Watching pool.
Jul 29 07:13:48 EDMB2 kernel: NSSLOG ==> [Upgrade] zlssUpgrade.c[3224]
Jul 29 07:13:48 EDMB2 kernel: ZLSS upgrade thread started.
Jul 29 07:13:48 EDMB2 kernel: NSSLOG ==> [MSAP] comnLog.c[201]
Jul 29 07:13:48 EDMB2 kernel: Pool "EDMBC1" - MSAP deactivate.
Jul 29 07:13:48 EDMB2 kernel: There is no stop!
Jul 29 07:14:08 EDMB2 ncs-configd: LDAP bind failed: ldap.INVALID_CREDENTIALS
Jul 29 07:14:08 EDMB2 kernel: NSSLOG ==> [MSAP] comnLog.c[201]
Jul 29 07:14:08 EDMB2 kernel: Pool "EDMBC1" - MSAP activate.
Jul 29 07:14:08 EDMB2 kernel: Server(77cec522-6d6d-102f-bf-ed-00505639a792) Cluster(c18e388e-3307-40b8-7a-94-8e388ec10733)
Jul 29 07:14:08 EDMB2 kernel: NSSLOG ==> [MSAP] comnLog.c[201]
Jul 29 07:14:08 EDMB2 kernel: Pool "EDMBC1" - Watching pool.
Jul 29 07:14:09 EDMB2 kernel: NSSLOG ==> [MSAP] comnLog.c[201]
Jul 29 07:14:09 EDMB2 kernel: Pool "EDMBC1" - MSAP deactivate.
Jul 29 07:14:28 EDMB2 ncs-configd: LDAP bind failed: ldap.INVALID_CREDENTIALS
Jul 29 07:14:48 EDMB2 ncs-configd: LDAP bind failed: ldap.INVALID_CREDENTIALS
Jul 29 07:14:48 EDMB2 kernel: There is no stop!
Jul 29 07:15:07 EDMB2 ncs-configd: LDAP bind failed: ldap.INVALID_CREDENTIALS
Jul 29 07:15:25 EDMB2 ncs-configd: LDAP bind failed: ldap.INVALID_CREDENTIALS
Jul 29 07:15:25 EDMB2 kernel: CLUSTER-<INFO>-<12040>: Rebuild command issued to all the nodes.
Jul 29 07:15:51 EDMB2 kernel: NSSLOG ==> [Upgrade] zlssUpgrade.c[3409]
Jul 29 07:15:51 EDMB2 kernel: ZLSS upgrade thread done for now.
Jul 29 07:15:51 EDMB2 ncs-configd: LDAP bind failed: ldap.INVALID_CREDENTIALS
Resolution
Edit the /etc/opt/novell/ncs/clstrlib.conf file as follows, replacing the encoded text within the quotes with the appropriate information below (in bold)...
(iclstrlibss
data
p0
(dp1
S'adminDn'
p2
S'cn=admin,ou=admins,o=novell'
p3
sS'ldapUrl'
p4
S'ldaps://10.241.20.51:636'
p5
sS'adminPw'
p6
S'adminpassword'
p7
sS'clusterDn'
p8
S'cn=CLUSTER,ou=CLUSTERS,o=NOVELL'
p9
Once clstrlib.conf is corrected and saved, reboot the node. The adminDn and adminPw entries will be re-encoded on reboot.
Once rebooted, further attempts to create the cluster-enabled pools will now succeed.
(iclstrlibss
data
p0
(dp1
S'adminDn'
p2
S'cn=admin,ou=admins,o=novell'
p3
sS'ldapUrl'
p4
S'ldaps://10.241.20.51:636'
p5
sS'adminPw'
p6
S'adminpassword'
p7
sS'clusterDn'
p8
S'cn=CLUSTER,ou=CLUSTERS,o=NOVELL'
p9
Once clstrlib.conf is corrected and saved, reboot the node. The adminDn and adminPw entries will be re-encoded on reboot.
Once rebooted, further attempts to create the cluster-enabled pools will now succeed.
Additional Information
It has been observed that rather than a reboot, a "cluster leave / cluster join" may be sufficient to effect the resolution, however, Novell Engineering recommends issuing a "rcnovell-ncs restart" to ensure all NCS modules are in fact refreshed.
It should be noted that from OES2 SP3 and on the admin password is no longer stored in this file, and Administrators should follow the following document to change admin credentials...